summaryrefslogtreecommitdiffstats
path: root/CGI.pl
AgeCommit message (Collapse)AuthorFilesLines
2004-10-25[SECURITY] Bug 253544: Changes to the metadata (filename, description, mime ↵justdave%bugzilla.org1-3/+9
type, review flags) on attachments which were flagged as private get displayed to users who are not members of the group allowed to see private attachments when viewing the bug activity log. This only affects sites that use the 'insidergroup' feature. Patch by Joel Peshkin <bugreport@peshkin.net> r=zach,justdave, a=justdave
2004-08-05Bug 186093: Move CanSeeBug to User.pm and make User.pm usable by templatesbugreport%peshkin.net1-1/+1
r=kiko a=justdave
2004-07-31Patch for bug 253357: replace IFNULL with COALESCE for increased database ↵jocuri%softhome.net1-1/+1
compatibility; patch by Tomas Kopal <Tomas.Kopal@altap.cz>; r=vladd, a=justdave.
2004-07-30Bug 253447: Fix unhelpful error if user enters text in "blocks" fieldbugreport%peshkin.net1-1/+1
r=kiko a=justdave
2004-07-29Fix for bug 236678: Clean up access to COOKIE global. Murder the lastkiko%async.com.br1-4/+0
remaining places in the tree where COOKIE is used; includes a rather thorough cleanup of Bugzilla::Bug->user and a minor doc update. r=joel, a=justdave.
2004-07-07Fix for bug 248988: On Windows, attachments may fail due to "CGI open of ↵jocuri%softhome.net1-0/+8
tmpfile"; patch by byron jones (glob) <bugzilla@glob.com.au>; r=jouni; a=justdave.
2004-03-27Fix for bug 234175: Remove deprecated ConnectToDatabase() andkiko%async.com.br1-8/+0
quietly_check_login()/confirm_login() calls. Cleans up callsites (consisting of most of our CGIs), swapping (where appropriate) for calls to Bugzilla->login. Patch by Teemu Mannermaa <wicked@etlicon.fi>. r=bbaetz, kiko. a=justdave.
2003-10-30Fix for bug 67663: globals.pl and CGI.pl emit "subroutine redefined"kiko%async.com.br1-1/+1
messages. Fudge warnings via sillyness. r=myk, chaduv. a=myk.
2003-10-17Backing out patch from bug 108528 - failed to take i10n concerns into accountjustdave%syndicomm.com1-2/+1
2003-10-16Bug 108528 - knob is not defined doesn't explain to 2001110503 users what to dotimeless%mozdev.org1-1/+2
patch by caduvall@glue.umd.edu r=timeless a=justdave
2003-10-08Bug 213384: shutdownhtml login bypass via editparams.cgi is broken under ↵jocuri%softhome.net1-1/+1
suexec. r=kiko, a=justdave
2003-09-14Bug 208699 - Move Throw{Code,Template}Error into Error.pmbbaetz%acm.org1-80/+5
r,a=justdave
2003-06-03Bug 180635 - Enhance Bugzilla::User to store additional informationbbaetz%acm.org1-47/+0
r=myk,jake
2003-05-05Bug 201816 - use CGI.pm for header outputbbaetz%acm.org1-2/+2
r=joel, a=justdave
2003-04-02Bug 199813 - Make all users of ThrowUserError pass $vars in explicitly.bbaetz%acm.org1-20/+2
r=gerv a=justdave
2003-03-22Bug 180642 - Move authentication code into a modulebbaetz%acm.org1-363/+15
r=gerv, justdave a=justdave
2003-02-17Bug 135820 - token cancellation message are not user-friendlyburnus%gmx.de1-1/+1
r=gerv, a=justdave
2003-02-10Bug 124174 - make processmail a package (Bugzilla::BugMail), r=gerv, r=jth, ↵preed%sigkill.com1-4/+1
a=justdave
2003-02-09Bug 192393 - $::dbwritesallowed never setbbaetz%acm.org1-2/+2
r, a=justdave
2003-02-07Bug 191863 - Clean up Bugzilla.pmbbaetz%acm.org1-1/+1
r=gerv, justdave a=justdave
2002-12-20Bug 173622 - Move template handling into a module. r=justdave, joel, a=justdavebbaetz%student.usyd.edu.au1-5/+3
2002-12-06Bug 183843 Query knobs are missing if requirelogin is setbugreport%peshkin.net1-2/+1
r,a=justdave
2002-11-28Bug 67077 - We now include the timezone (as configured in editparams.cgi) on ↵jake%bugzilla.org1-1/+1
every time we display. r=justdave a=justdave
2002-11-27Bug 173761 Need ability to always require loginbugreport%peshkin.net1-4/+19
patch by joel r=gerv, a=justdave
2002-11-27Bug 114179 - Concentration, improvement, and templatisation of Bugzilla ↵gerv%gerv.net1-0/+3
general user help system. Patch by gerv; r,a=justdave.
2002-11-11Bug 179290 - login cookie email needs to be escapedbbaetz%student.usyd.edu.au1-1/+1
r=jake, a=justdave
2002-11-09Bug 114696 - permission checking in queries not optimalbbaetz%student.usyd.edu.au1-2/+5
Patch by joel, dkl + me r=myk, a=justdave
2002-11-05Fix for bug 156548: XUL implementation of duplicates report.myk%mozilla.org1-1/+1
2002-10-26Bug 147833 - start using CGI.pmbbaetz%student.usyd.edu.au1-185/+18
r=gerv, justdave
2002-10-17Bug 112373 you should be able to enter bug dependencies/blockers when you ↵bugreport%peshkin.net1-0/+31
enter a bug. patch by jhedlund r,2xr=joel
2002-10-17Bug 172959 - Remove old reporting (most doomed etc.). Patch by gerv; r=bbaetz.gerv%gerv.net1-50/+1
2002-10-13Bug 24789 [E|A|R] Add Estimated, Actual, Remaining Time Fieldsbugreport%peshkin.net1-26/+45
patch by jeff.hedlund@matrixsi.com 2xr=joel,justdave
2002-10-08Bug 171437 - Enhancements to generic reporting. Reporting menu, 3D tables, ↵gerv%gerv.net1-0/+29
rearranged UI, better API for new report types. Patch by gerv; r=joel.
2002-10-06Bug 163114 - Templatise all calls to DisplayError. Patch D (the last one). ↵gerv%gerv.net1-12/+0
Patch by gerv; r=burnus.
2002-10-03Bug 155389 - More <link> elements & templatization of navigation_links. ↵gerv%gerv.net1-43/+0
Patch by gerv; r=bbaetz.
2002-10-02Bug 20122 - Bugzilla requires new login if IP changesbbaetz%student.usyd.edu.au1-4/+38
r=joel x2
2002-10-02Bug 172010 voting broken on tipbugreport%peshkin.net1-1/+1
Regression from 43600 and 157756 2xr=bbaetz
2002-09-29Bug 163114 - Templatise all calls to DisplayError. Patch B. Patch by gerv; ↵gerv%gerv.net1-30/+7
r=burnus.
2002-09-27Bug 170986 - General Summary reports don't work with taint checking. Also ↵gerv%gerv.net1-4/+8
fixes Throw*Error's $extra_vars parameter. Patch by gerv; r=bbaetz.
2002-09-23Bug 170064 - Change error API again to allow vars to be passed in the call. ↵gerv%gerv.net1-6/+18
Patch by gerv; r=bbaetz.
2002-09-23bug 157756 - Groups_20020716_Branch Tracking : > 55 groups now supportedbugreport%peshkin.net1-36/+33
r=bbaetz, gerv
2002-09-05Bug 166698 - clean up the error system, which was confused and broken. Patch ↵gerv%gerv.net1-4/+0
by gerv; r=bbaetz.
2002-08-31Bug 121419 - If multiple cookies exist, the least significant is assigned.bugreport%peshkin.net1-1/+3
2xr = bbaetz Also fixes Duplicate Bug 165685 When switching from no cookiepath to using cookiepath, old cookie gets in the way
2002-08-29Bug 163829 - move pref code into a separate packagebbaetz%student.usyd.edu.au1-0/+1
r=joel, preed
2002-08-27Bug 161203 - Bug changes with intermediate pages munges fields withbbaetz%student.usyd.edu.au1-0/+1
multiple values (e.g., CC) patch by "Randall M! Gee", r=bbaetz, myk
2002-08-26Bug 76923 - Don't |use diagnostics| (its really expensive at startup time)bbaetz%student.usyd.edu.au1-1/+0
r=joel x2
2002-08-20Bug 163331 - shutdownhtml is broken. Patch by gerv; r=bbaetz.gerv%gerv.net1-4/+1
2002-08-20Bug 143286 - Add support for Insiders, Private comments, Private ↵gerv%gerv.net1-1/+1
Attachments. Patch by bugreport@peshkin.net; r=gerv.
2002-08-19Big 163291 - Move utility funcs into a modulebbaetz%student.usyd.edu.au1-25/+2
r=preed x2
2002-08-16Bug 162068 - Fix callers of ThrowUserError to use messages.html.tmpl. Patch ↵gerv%gerv.net1-12/+6
by gerv; r=bbaetz.